Guideline 5.1.1
Guideline 5.1.1(v) - Privacy: No Account Deletion Option
Our Take
Apple is rejecting your app because it supports account creation but does not offer a way for users to delete their account from within the app. Since June 2022, any app that allows users to create an account must also let them initiate account deletion directly in the app — not just through a website, email, or support ticket. The deletion process must be easy to find and not buried behind excessive steps. Apple accepts deletion flows that include a brief confirmation dialog or a short waiting period (for security reasons), but the initiation must happen in-app. If full instant deletion is not possible due to regulatory requirements (e.g., financial record-keeping), you can offer a temporary deactivation followed by full deletion within a reasonable period, but you must clearly communicate this timeline. This rejection is increasingly common because many apps added account creation without adding a corresponding deletion path. Apple enforces this strictly — even if your backend supports deletion via API, if there's no user-facing button or menu item in the app, you'll be rejected.
Resolution Guide
**Add 'Delete Account' in settings** — Place a clearly labeled 'Delete Account' or 'Delete My Account' button in your app's Settings or Account/Profile screen. Do not bury it — Apple reviewers must find it easily.
**Implement the deletion flow** — The button should trigger a confirmation dialog explaining what will happen (data deleted, subscriptions note, etc.), then call your backend deletion API.
**Handle active subscriptions** — Inform users that deleting their account does not cancel active App Store subscriptions. Link to Apple's subscription management page.
**Communicate timelines** — If deletion is not instant (e.g., 30-day grace period for regulatory reasons), clearly state the timeline in the confirmation dialog.
**Actually delete the data** — The deletion must be real — remove personal data from your servers. If certain data must be retained for legal reasons, explain what is retained, why, and for how long.
**Use Sign in with Apple REST API** — If you support Sign in with Apple, call the revoke tokens endpoint when the user deletes their account.
Prevention
Example Rejection Email
Before & After
App allows Sign Up and Login but the only way to delete an account is by emailing support@example.com
Settings > Account > Delete Account button with confirmation dialog: 'This will permanently delete your account and all associated data. Active subscriptions will not be affected — manage them in Settings > Subscriptions. This action cannot be undone.' followed by backend data deletion
What changed: Account deletion must be initiate-able within the app, not through external channels.
Community Solutions · 0
Sign in to share your solution.
More Guideline 5 (Legal) rejections
- Guideline 5 - Legal: Remove Watermark Feature
- Guideline 5.1.1 - Data Collection and Storage: Incomplete Privacy Manifest
- Guideline 5.1.1 - Data Collection and Storage: Missing Purpose Strings
- Guideline 5.1.1 - Data Collection and Storage: Privacy Manifest Missing
- Guideline 5.1.1 - Data Collection and Storage: Privacy Nutrition Label Mismatch
- Guideline 5.1.1 - Data Collection and Storage: Privacy Policy